Apple Inc.

Shu Guo

Dawei Zhang

Huarui Liang

Fangli Xu

Yuqin Chen

Haijing Hu

Xiangying Yang

Sudeep Manithara Vamanan

Lijia Zhang

Ralf Rossbach

Mona Agnel

Zhibin Wu

Li Li

Lanpeng Chen

Wei Zeng

Yushu Zhang

Haitong Sun

Weidong Yang

Chunhai Yao

Hao Duo

Hong He

Oghenekome Oteri

Chunxuan Ye

Yuchul Kim

Yannick L Sierra

Samuel David Post

Jean-Marc Padova

Qian Sun

Xiaoyu Qiao

Yang Tang

Jie Cui

Srinivasan Nimmala

Sarma V Vangala

Krisztian Kiss

Sethuraman Gurumoorthy

Longda Xing

Srirang Ashok Lovlekar

Murtaza A Shikari

Sree Ram Kodali

Robert Zaus

Rohan C Malthankar

Naveen Kumar R Palle Venkata

Sridhar Prakasam

Pavan Nuggehalli

Nirlesh Koshta

Elliot S Briggs

Anikethan Ramakrishna Vijaya Kumar

Robert K Kitchens

This application sets forth techniques for authenticating a mobile device with a cellular wireless network without electronic Subscriber Identity Module (eSIM) credentials by using an Extensible Authentication Protocol Transport Layer Security (EAP-TLS) procedure. The mobile device authenticates with an Authentication Server Function (AUSF) of the cellular wireless network using an embedded Universal Integrated Circuit Card (eUICC) certificate. Processing circuitry of the mobile wireless device external to the eUICC implements the EAP-TLS procedure and authenticates validity of the AUSF. In some embodiments, the eUICC provides key generation and storage for a session key for communication between the mobile device and the cellular wireless network. In some embodiments, a third-party managed Unified Data Management (UDM) broker authenticates the mobile device based on knowledge of the eUICC certificate and provides a session key to the cellular wireless network for subsequent communication with the mobile device, upon successful authentication of the mobile device.

Mobile device authentication without electronic subscriber identity module (eSIM) credentials

A UE may receive a first GUTI from a network. The UE may transition to a Connected mode in response to a paging procedure with the network. The UE may take actions to ensure that a second GUTI is obtained from the network. Other aspects are described.

Enhanced user equipment security against attacks in a 4g or 5g network

This disclosure relates to techniques for determining a quasi-co-located assumption for aperiodic channel state information reference signals for multi-transmission-reception-point operation in a wireless communication system. A wireless device may establish wireless links with multiple transmission-reception-points of a cellular network. The wireless device may receive downlink control information. The wireless device may determine a quasi-co-located assumption for aperiodic channel state information reference signals for the downlink control information. Signals received according to the quasi-co-located assumption for aperiodic channel state information reference signals may be buffered by the wireless device if a scheduling offset for the downlink control information is below a scheduling offset threshold.

Quasi-co-located assumption for aperiodic CSI-RS for multi-TRP operation

This disclosure relates to techniques for performing wireless communications including authentication between user equipment and edge computing servers. One or more edge enabler client(s) operating at a user equipment may authenticate with one or more edge computing server(s). The authentication may use generic bootstrapping architecture, among various possibilities.

Authentication between wireless devices and edge servers

A network receives an indication of user consent from a user equipment (UE) to access UE information for the purposes of edge computing. The network receives an indication of user consent from a UE, the user consent corresponding to a network function acquiring UE information, receives the UE information and performs operations related to establishing a connection between the UE and an edge data network.

Network operations to receive user consent for edge computing

Embodiments are presented herein of apparatuses, systems, and methods for a user equipment device (UE) and a network to perform closed-loop transmission power control in a multi-base station environment with out-of-order scheduling. The network may configure a series of transmission power control commands to indicate to the UE transmission power for one or more transmissions to different base stations. The UE may receive the transmission power control commands, consider information including timing and/or resources associated with the transmission power control commands, and determine transmission power for the transmissions.

System and method for closed-loop uplink power control

A user equipment (UE) may attempt to access an edge data network. The UE generates a first credential based on a second credential, the second credential generated for a procedure between the UE and a cellular network, generating an identifier corresponding to the first credential, and generates a multi-access edge computing (MEC) authorization parameter. The UE then transmits an application registration request message to a server associated with an edge data network, the application registration request message including an indication of the first credential, the identifier corresponding to the first credential and the first authorization parameter. The UE then receives an authentication accept message or an authentication reject message from the server associated with the edge data network.

User equipment authentication and authorization procedure for edge data network

A user equipment (UE) includes a first subscriber identification module (SIM) and a second SIM. The UE is configured to establish a first cellular network connection based on, at least, the first SIM and a second cellular network connection based on, at least, the second SIM. The UE sends, by the first SIM, a first registration request to the network, wherein the first registration request comprises an identification indicating the multi-SIM device is a type of multi-SIM device, receives, by the first SIM, a first registration accept message indicating the first registration request has been accepted, wherein the first registration accept message comprises a first temporary identification for the first SIM and sends, by the second SIM, an access network message comprising one of the first temporary identification or a further temporary identification based on, at least, the first temporary identification.

Control plane for multi-SIM devices

The present application relates to devices and components including apparatus, systems, and methods for secure random access in wireless communication systems.

Secure random access procedure

An edge enabler server of an edge data network is configured to receive a verification request comprising an edge enabler client identification (EEC ID), wherein the EEC ID uniquely identifies an edge enabler client (EEC), determine whether the EEC ID is an authorized EEC ID and provide a verification response based on whether the EEC ID is authorized.

Edge enabler client identification authentication procedures

The exemplary embodiments relate to a user equipment (UE) providing an indication of user consent to a network for access to UE information. The UE may perform operations including transmitting an indication of user consent to a first network. The user consent corresponds to a network function acquiring UE information. The operations also include transmitting the UE information to the first network and establishing a connection with a second network. The network function performs operations related to establishing the connection between the UE and the second network using the UE information.

Security protection on user consent for edge computing

A user equipment (UE) is configured to join a multicast broadcast service (MBS) session. The UE sends, to a network function, a protocol data unit (PDU) modification request comprising a request to join a multicast broadcast service (MBS) session, generates a first key (K), receives a PDU session modification complete message comprising an encrypted second key (K) and a key identification (KID) corresponding to the Kand decrypts the Kiss using the K.

Multicast broadcast service keys

Apparatuses, systems, and methods for revocation and/or modification of user consent in Edge Computing (MEC). A user equipment device (UE) may determine that user consent needs to be updated. The user consent may be associated with MEC. Additionally, the UE may transmit, via an application layer of the UE, a user consent modification request to an edge application server of a network, e.g., of an edge data network. The user consent modification request may be carried in application data traffic. The user consent modification request may be indicated via an Nnef_ParameterProvision_Update service operation. The user consent modification request is indicated via an Nnef_ParameterProvision_Update service operation.

Revocation and modification of user consent

The present application relates to devices and components including apparatus, systems, and methods for security enhancement with respect to reselection of relay user equipment.

Technologies for relay user equipment reselection

Embodiments are presented herein of apparatuses, systems, and methods for a user equipment device (UE) and/or cellular network to resume a connection. To resume the connection, the UE may transmit a fully protected connection resume message, e.g., which may include protection for a resume cause field.

Use of a fully protected connection resume message by a base station (BS) and user equipment device (UE)

Growing community of inventors

Beijing, China

Shu Guo